chore(deps): bump the go group with 12 updates (#227)

Bumps the go group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) |
`2.8.1` | `2.8.2` |
|
[github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller)
| `1.5.1` | `1.5.2` |
|
[github.com/fluxcd/image-automation-controller/api](https://github.com/fluxcd/image-automation-controller)
| `1.1.0` | `1.1.1` |
|
[github.com/fluxcd/image-reflector-controller/api](https://github.com/fluxcd/image-reflector-controller)
| `1.1.0` | `1.1.1` |
|
[github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller)
| `1.8.1` | `1.8.2` |
|
[github.com/fluxcd/notification-controller/api](https://github.com/fluxcd/notification-controller)
| `1.8.1` | `1.8.2` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) |
`1.25.0` | `1.25.1` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) |
`0.102.0` | `0.103.0` |
| [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.69.0`
| `0.70.0` |
|
[github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller)
| `1.8.0` | `1.8.1` |
|
[github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller)
| `0.28.0` | `0.29.0` |
| [ocm.software/ocm](https://github.com/open-component-model/ocm) |
`0.36.0` | `0.37.0` |

Updates `github.com/fluxcd/flux2/v2` from 2.8.1 to 2.8.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/flux2/releases">github.com/fluxcd/flux2/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.8.2</h2>
<h2>Highlights</h2>
<p>Flux v2.8.2 is a patch release that comes with various fixes. Users
are encouraged to upgrade for the best experience.</p>
<p>ℹ️ Please follow the <a
href="https://github.com/fluxcd/flux2/discussions/5572">Upgrade
Procedure for Flux v2.7+</a> for a smooth upgrade from Flux v2.6 to the
latest version.</p>
<p>Fixes:</p>
<ul>
<li>Fix enqueuing new reconciliation requests for events on source Flux
objects when they are already reconciling the revision present in the
watch event (kustomize-controller, helm-controller)</li>
<li>Fix the Go templates bug of YAML separator <code>---</code> getting
concatenated to <code>apiVersion:</code> by updating to Helm 4.1.3
(helm-controller)</li>
<li>Fix canceled HelmReleases getting stuck when they don't have a retry
strategy configured by introducing a new feature gate
<code>DefaultToRetryOnFailure</code> that improves the experience when
the <code>CancelHealthCheckOnNewRevision</code> is enabled
(helm-controller)</li>
<li>Fix the auth scope for Azure Container Registry to use the
ACR-specific scope (source-controller, image-reflector-controller)</li>
<li>Fix potential Denial of Service (DoS) during TLS handshakes
(CVE-2026-27138) by building all controllers with Go 1.26.1</li>
</ul>
<h2>Components changelog</h2>
<ul>
<li>source-controller <a
href="https://github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md">v1.8.1</a></li>
<li>kustomize-controller <a
href="https://github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md">v1.8.2</a></li>
<li>notification-controller <a
href="https://github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md">v1.8.2</a></li>
<li>helm-controller <a
href="https://github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md">v1.5.2</a></li>
<li>image-reflector-controller <a
href="https://github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md">v1.1.1</a></li>
<li>image-automation-controller <a
href="https://github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md">v1.1.1</a></li>
<li>source-watcher <a
href="https://github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md">v2.1.1</a></li>
</ul>
<h2>CLI changelog</h2>
<ul>
<li>[release/v2.8.x] build(deps): bump the ci group across 1 directory
with 11 updates by <a
href="https://github.com/fluxcdbot"><code>@​fluxcdbot</code></a> in <a
href="https://redirect.github.com/fluxcd/flux2/pull/5765">fluxcd/flux2#5765</a></li>
<li>Update fluxcd/pkg dependencies by <a
href="https://github.com/fluxcdbot"><code>@​fluxcdbot</code></a> in <a
href="https://redirect.github.com/fluxcd/flux2/pull/5767">fluxcd/flux2#5767</a></li>
<li>Update toolkit components by <a
href="https://github.com/matheuscscp"><code>@​matheuscscp</code></a> in
<a
href="https://redirect.github.com/fluxcd/flux2/pull/5770">fluxcd/flux2#5770</a></li>
<li>Update fluxcd/pkg dependencies by <a
href="https://github.com/fluxcdbot"><code>@​fluxcdbot</code></a> in <a
href="https://redirect.github.com/fluxcd/flux2/pull/5771">fluxcd/flux2#5771</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2">https://github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/flux2/commit/bfa461ed2153ae5e0cca6bce08e0845268fb3088"><code>bfa461e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5771">#5771</a>
from fluxcd/update-pkg-deps/release/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/f11a921e0cdc6c681a157c7a4777150463eaeec8"><code>f11a921</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/b248efab1d786a27ccddf4b341a1034d67c14b3b"><code>b248efa</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5770">#5770</a>
from fluxcd/backport-5769-to-release/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/4d5e044eb9067a15d1099cb9bc81147b5d4daf37"><code>4d5e044</code></a>
Update toolkit components</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/3c8917ca28a93d6ab4b97379c0c81a4144e9f7d6"><code>3c8917c</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5767">#5767</a>
from fluxcd/update-pkg-deps/release/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/c1f11bcf3d6433dbbb81835eb9f8016c3067d7ef"><code>c1f11bc</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/bc6aa4754cca1fa30cc82fff19e1b708ffe8e115"><code>bc6aa47</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5765">#5765</a>
from fluxcd/backport-5764-to-release/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/0e7194ce7718c82163126f5d0ce58ac977d348c7"><code>0e7194c</code></a>
build(deps): bump the ci group across 1 directory with 11 updates</li>
<li>See full diff in <a
href="https://github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/helm-controller/api` from 1.5.1 to 1.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/helm-controller/releases">github.com/fluxcd/helm-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.2</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md">v1.5.2
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/helm-controller:v1.5.2</code></li>
<li><code>ghcr.io/fluxcd/helm-controller:v1.5.2</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md">github.com/fluxcd/helm-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.5.2</h2>
<p><strong>Release date:</strong> 2026-03-12</p>
<p>This patch release fixes reconciliation queue behavior for source
watch events
while a HelmRelease is already reconciling the watched revision. It also
comes
with Helm 4.1.3, which fixes a Go templates bug where the YAML document
separator
<code>---</code> could be concatenated to <code>apiVersion</code> as
<code>---apiVersion</code>, and introduces
the <code>DefaultToRetryOnFailure</code> feature gate to improve the
experience when
<code>CancelHealthCheckOnNewRevision</code> is enabled by ensuring
canceled HelmReleases
do not get stuck when no retry strategy is configured.</p>
<p>Fixes:</p>
<ul>
<li>Fix enqueing the same revision while reconciling
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1430">#1430</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>Introduce <code>DefaultToRetryOnFailure</code> feature gate
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1431">#1431</a></li>
<li>Update fluxcd/pkg dependencies
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1436">#1436</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/942324a112dd56ab342335b45a141bd61c063a51"><code>942324a</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1439">#1439</a>
from fluxcd/release-v1.5.2</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/d67939621f83944e954e726eddae9f553cfc7e7a"><code>d679396</code></a>
Release v1.5.2</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/4e20b44ba9d5a77d0b52166a222020c31e44f7dd"><code>4e20b44</code></a>
Add changelog entry for v1.5.2</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/440a3a6a1c98056ca0724409301301665b48671f"><code>440a3a6</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1436">#1436</a>
from fluxcd/update-pkg-deps/release/v1.5.x</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/1f0eae93dc5a2a0528b53cdb1852325956cc43c0"><code>1f0eae9</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/f27c7a7f861a9321b946614b26e08e38928d99fa"><code>f27c7a7</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1435">#1435</a>
from fluxcd/backport-1430-to-release/v1.5.x</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/1986afd10b810b47d00ef65ac727cbb5f8eedd23"><code>1986afd</code></a>
Fix enqueing the same revision while reconciling</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/9f1a820ca2a93354235a58c6a79a1eac4e335912"><code>9f1a820</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1434">#1434</a>
from fluxcd/backport-1431-to-release/v1.5.x</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/096694f9e2cf6c92f99c991b5fa2ad557f09203b"><code>096694f</code></a>
Introduce DefaultToRetryOnFailure feature gate</li>
<li>See full diff in <a
href="https://github.com/fluxcd/helm-controller/compare/v1.5.1...v1.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/image-automation-controller/api` from 1.1.0
to 1.1.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-automation-controller/releases">github.com/fluxcd/image-automation-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md">v1.1.1
changelog</a></p>
<h2>Container images</h2>
<ul>

<li><code>docker.io/fluxcd/image-automation-controller:v1.1.1</code></li>
<li><code>ghcr.io/fluxcd/image-automation-controller:v1.1.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-automation-controller/blob/main/CHANGELOG.md">github.com/fluxcd/image-automation-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.1.1</h2>
<p><strong>Release date:</strong> 2026-03-12</p>
<p>This patch release comes with dependency updates.</p>
<p>Improvements:</p>
<ul>
<li>Remove no longer needed workaround for Flux 2.8
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/1014">#1014</a></li>
<li>Update fluxcd/pkg dependencies
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/1017">#1017</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/dc9cf94bc6e7f51eb27c62ce9b3c8b7eb57c9ed0"><code>dc9cf94</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/1018">#1018</a>
from fluxcd/release-v1.1.1</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/382128f088d12fbedf2218cc6a9d6f837df41173"><code>382128f</code></a>
Release v1.1.1</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/c0db58eec1d508bcc786d9e9a71ce56969574bb3"><code>c0db58e</code></a>
Add changelog entry for v1.1.1</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/9379aa64eb32a7df4712ea0129fb1cca69749ae0"><code>9379aa6</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/1017">#1017</a>
from fluxcd/update-pkg-deps/release/v1.1.x</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/a7c668dd99e10aa60d995d68d8f1d60b73e39440"><code>a7c668d</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/54f0c2a7e4adebdc5d62a0d377b3b49d8be6dbab"><code>54f0c2a</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/1015">#1015</a>
from fluxcd/backport-1014-to-release/v1.1.x</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/1339ca248c519af79e048f42d2556753a93ae6db"><code>1339ca2</code></a>
Remove no longer needed workaround for Flux 2.8</li>
<li>See full diff in <a
href="https://github.com/fluxcd/image-automation-controller/compare/v1.1.0...v1.1.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/image-reflector-controller/api` from 1.1.0 to
1.1.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-reflector-controller/releases">github.com/fluxcd/image-reflector-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md">v1.1.1
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/image-reflector-controller:v1.1.1</code></li>
<li><code>ghcr.io/fluxcd/image-reflector-controller:v1.1.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-reflector-controller/blob/main/CHANGELOG.md">github.com/fluxcd/image-reflector-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.1.1</h2>
<p><strong>Release date:</strong> 2026-03-12</p>
<p>This patch release fixes Azure Container Registry authentication by
using the
ACR-specific auth scope instead of the generic registry scope.</p>
<p>Improvements:</p>
<ul>
<li>Remove no longer needed workaround for Flux 2.8
<a
href="https://redirect.github.com/fluxcd/image-reflector-controller/pull/872">#872</a></li>
<li>Update fluxcd/pkg dependencies
<a
href="https://redirect.github.com/fluxcd/image-reflector-controller/pull/874">#874</a>
<a
href="https://redirect.github.com/fluxcd/image-reflector-controller/pull/876">#876</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/483c6e91e50f3b82d1858481dc768590713253c3"><code>483c6e9</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/877">#877</a>
from fluxcd/release-v1.1.1</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/864fb4a927c5e3681065ee601a54c4ba108f480b"><code>864fb4a</code></a>
Release v1.1.1</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/22b4b304baa9e29795cdea426a486902cd265eba"><code>22b4b30</code></a>
Add changelog entry for v1.1.1</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/1aec1f8204b1f084164864575d7434f94b9cdbd8"><code>1aec1f8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/876">#876</a>
from fluxcd/update-pkg-deps/release/v1.1.x</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/a1f81c8bac14de80118c2ed382811d0ebf1bc85b"><code>a1f81c8</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/3f3ccff2633fc8f845d521fc1eb804805dd20705"><code>3f3ccff</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/874">#874</a>
from fluxcd/update-pkg-deps/release/v1.1.x</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/acbbe27c76b8f2840f276ab6d3b58ad7c92c63eb"><code>acbbe27</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/8773940be6b0b4378ef324a7119ec3e9e8e50aa3"><code>8773940</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/873">#873</a>
from fluxcd/backport-872-to-release/v1.1.x</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/f06446e0a98f453ddb729b37a80e8e39f232b9d1"><code>f06446e</code></a>
Remove no longer needed workaround for Flux 2.8</li>
<li>See full diff in <a
href="https://github.com/fluxcd/image-reflector-controller/compare/v1.1.0...v1.1.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/kustomize-controller/api` from 1.8.1 to 1.8.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/releases">github.com/fluxcd/kustomize-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.2</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md">v1.8.2
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/kustomize-controller:v1.8.2</code></li>
<li><code>ghcr.io/fluxcd/kustomize-controller:v1.8.2</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md">github.com/fluxcd/kustomize-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.8.2</h2>
<p><strong>Release date:</strong> 2026-03-12</p>
<p>This patch release fixes reconciliation queue behavior for source
watch events
while a Kustomization is already reconciling the watched revision.</p>
<p>Fixes:</p>
<ul>
<li>Fix enqueing the same revision while reconciling
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1614">#1614</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>Fix docs typo
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1609">#1609</a></li>
<li>Update fluxcd/pkg dependencies
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1616">#1616</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/42b9656f7704a14f426ec246691de683ff48cd31"><code>42b9656</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1619">#1619</a>
from fluxcd/release-v1.8.2</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/f3b4e7fdbf7b5372334e29d2084dd9b4cee65564"><code>f3b4e7f</code></a>
Release v1.8.2</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/19b22d0fe47a42ac993fbd0340f19cb387afc88e"><code>19b22d0</code></a>
Add changelog entry for v1.8.2</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/5d6a25963eefbc28c5a501f5a08b603e6f883f41"><code>5d6a259</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1616">#1616</a>
from fluxcd/update-pkg-deps/release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/d77f236dd6e8b6773e30dab4ec8a7751cb61a38e"><code>d77f236</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/22ec318879cb1027bac50c30e654b65c923d018d"><code>22ec318</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1615">#1615</a>
from fluxcd/backport-1614-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/bd08fdeeed4f5bb30b6af6bb590dd958529a59ac"><code>bd08fde</code></a>
Fix enqueing the same revision while reconciling</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/4fff2fd08a7428e110dc5ed3a58cc2b7f0ac846b"><code>4fff2fd</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1610">#1610</a>
from fluxcd/backport-1609-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/c235d2657b507e221de483c877ed31d21bec5f3c"><code>c235d26</code></a>
fix: docs typo</li>
<li>See full diff in <a
href="https://github.com/fluxcd/kustomize-controller/compare/v1.8.1...v1.8.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/notification-controller/api` from 1.8.1 to
1.8.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/notification-controller/releases">github.com/fluxcd/notification-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.2</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md">v1.8.2
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/notification-controller:v1.8.2</code></li>
<li><code>ghcr.io/fluxcd/notification-controller:v1.8.2</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/notification-controller/blob/main/CHANGELOG.md">github.com/fluxcd/notification-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.8.2</h2>
<p><strong>Release date:</strong> 2026-03-12</p>
<p>This patch release comes with dependency updates.</p>
<p>Improvements:</p>
<ul>
<li>Bump <code>go.opentelemetry.io/otel/sdk</code> from
<code>1.39.0</code> to <code>1.40.0</code>
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1255">#1255</a></li>
<li>Update fluxcd/pkg dependencies
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1269">#1269</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/b10d55efe635b3613dc2b21a3c2aa133f508a809"><code>b10d55e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1272">#1272</a>
from fluxcd/release-v1.8.2</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/b3ffd5ec4a94ebb8c660c58ca12eb25cb0c10829"><code>b3ffd5e</code></a>
Release v1.8.2</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/1be0801adb1640c215247d3c07a8a8360ed94750"><code>1be0801</code></a>
Add changelog entry for v1.8.2</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/340bcb06f1c36f42f269d4383056f61a860d3623"><code>340bcb0</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1271">#1271</a>
from fluxcd/backport-1255-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/c6d61f16694d9050e2e530d3a1eef57dc9138f0e"><code>c6d61f1</code></a>
build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to
1.40.0</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/4fdb60fd86eac39240c5840a422e9a1703b607ad"><code>4fdb60f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1269">#1269</a>
from fluxcd/update-pkg-deps/release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/985c536188c67ad2cacaef9abfdf2616568ec26f"><code>985c536</code></a>
Update fluxcd/pkg dependencies</li>
<li>See full diff in <a
href="https://github.com/fluxcd/notification-controller/compare/v1.8.1...v1.8.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/apis/meta` from 1.25.0 to 1.25.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/021a21befa478b3a1827fc3d6ecb07129bdde5f3"><code>021a21b</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1149">#1149</a> from
fluxcd/release-flux/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/7bc8b6da944847c0bb6c8510547b7ab20acfaf79"><code>7bc8b6d</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/62e3263a2a8b43aad8d02c11960841117e27d7f9"><code>62e3263</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1147">#1147</a> from
fluxcd/backport-1146-to-flux/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/f6a623babee382fc5f7268a82817fd0ea0f116be"><code>f6a623b</code></a>
Upgrade to Kubernetes 1.35.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3e504526afdcf95650ddc174ad2968e4a569f089"><code>3e50452</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1138">#1138</a> from
fluxcd/release-flux/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6d1513a30fd4b48287a49b540a82895d38f6e87e"><code>6d1513a</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/72ab2befdad3a993e63522fed540a317241bd576"><code>72ab2be</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1139">#1139</a> from
fluxcd/backport-1130-to-flux/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/5b08e23d251fca0dbf9e57ee6a774a956607587c"><code>5b08e23</code></a>
Use ACR-scoped token for registry authentication</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/e8be077378c6daee855fa3ccd6cd2d70ca8ded9f"><code>e8be077</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1136">#1136</a> from
fluxcd/backport-1135-to-flux/v2.8.x</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/de936cb41a9b1566d44d10b5e54d137503b9d9ea"><code>de936cb</code></a>
Update <code>fluxcd/cli-utils</code> to v0.37.2-flux.1</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/apis/meta/v1.25.0...apis/meta/v1.25.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/runtime` from 0.102.0 to 0.103.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/357bbcc3462ccf78cc17fd0b9b7d498b1848bf14"><code>357bbcc</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1148">#1148</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/cb3348752458687e29a94d0b7a0b2a5d89b61cf5"><code>cb33487</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2513374b434f3746ec09cbeca119f33d8995010e"><code>2513374</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1146">#1146</a> from
fluxcd/upgrade-deps</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b30a6abe167dbff64704deff465daabdddf8e46f"><code>b30a6ab</code></a>
Upgrade to Kubernetes 1.35.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/70c14475169c9f2d6e7fbab0990cf24e0468f085"><code>70c1447</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1145">#1145</a> from
fluxcd/dependabot/github_actions/ci-fe7542dce4</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/cf1d606dde2757bb149c6696d3a0ceb655b2b3b8"><code>cf1d606</code></a>
build(deps): bump the ci group across 1 directory with 11 updates</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/07d627dd2f175e3ab569d67571838d4cfd705813"><code>07d627d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1137">#1137</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2f6ee78a2ec61d5aa7a36ec07697ebdd256688c1"><code>2f6ee78</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/0dd5550fc5593f19bf017cef470cbc0e2a312af1"><code>0dd5550</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1130">#1130</a> from
kukacz/fix-acr-scope-auth</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/68b8866be2d93ff52719d2cd9fc047e76eab9ba1"><code>68b8866</code></a>
Use ACR-scoped token for registry authentication</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.102.0...runtime/v0.103.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/ssa` from 0.69.0 to 0.70.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/357bbcc3462ccf78cc17fd0b9b7d498b1848bf14"><code>357bbcc</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1148">#1148</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/cb3348752458687e29a94d0b7a0b2a5d89b61cf5"><code>cb33487</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2513374b434f3746ec09cbeca119f33d8995010e"><code>2513374</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1146">#1146</a> from
fluxcd/upgrade-deps</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/b30a6abe167dbff64704deff465daabdddf8e46f"><code>b30a6ab</code></a>
Upgrade to Kubernetes 1.35.2</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/70c14475169c9f2d6e7fbab0990cf24e0468f085"><code>70c1447</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1145">#1145</a> from
fluxcd/dependabot/github_actions/ci-fe7542dce4</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/cf1d606dde2757bb149c6696d3a0ceb655b2b3b8"><code>cf1d606</code></a>
build(deps): bump the ci group across 1 directory with 11 updates</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/07d627dd2f175e3ab569d67571838d4cfd705813"><code>07d627d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1137">#1137</a> from
fluxcd/release-main</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/2f6ee78a2ec61d5aa7a36ec07697ebdd256688c1"><code>2f6ee78</code></a>
Prepare for release</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/0dd5550fc5593f19bf017cef470cbc0e2a312af1"><code>0dd5550</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/1130">#1130</a> from
kukacz/fix-acr-scope-auth</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/68b8866be2d93ff52719d2cd9fc047e76eab9ba1"><code>68b8866</code></a>
Use ACR-scoped token for registry authentication</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/ssa/v0.69.0...ssa/v0.70.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/source-controller/api` from 1.8.0 to 1.8.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/source-controller/releases">github.com/fluxcd/source-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md">v1.8.1
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/source-controller:v1.8.1</code></li>
<li><code>ghcr.io/fluxcd/source-controller:v1.8.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md">github.com/fluxcd/source-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.8.1</h2>
<p><strong>Release date:</strong> 2026-03-12</p>
<p>This patch release fixes Azure Container Registry authentication by
using the
ACR-specific auth scope instead of the generic registry scope.</p>
<p>Improvements:</p>
<ul>
<li>Remove no longer needed workaround for Flux 2.8
<a
href="https://redirect.github.com/fluxcd/source-controller/pull/1993">#1993</a></li>
<li>Update fluxcd/pkg dependencies
<a
href="https://redirect.github.com/fluxcd/source-controller/pull/2001">#2001</a>
<a
href="https://redirect.github.com/fluxcd/source-controller/pull/2005">#2005</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/source-controller/commit/d091e4aa04b66b3ea8704e8314ec1c5d25858870"><code>d091e4a</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/2007">#2007</a>
from fluxcd/release-v1.8.1</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/664a42c3f4c187c3bd5b7bd3eec28cabafcd3ba2"><code>664a42c</code></a>
Release v1.8.1</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/b900dcc1c22d079deefc1407e6616f0cbddcf6bb"><code>b900dcc</code></a>
Add changelog entry for v1.8.1</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/bc004b800d2c2b18d53be61acaaa45b64219dbb5"><code>bc004b8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/2005">#2005</a>
from fluxcd/update-pkg-deps/release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/9ea8b2b1db8ac52d17f1ff1f19ebc469bf8fb245"><code>9ea8b2b</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/071151e2b76c89226edeccf827ed73437eb651de"><code>071151e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/2001">#2001</a>
from fluxcd/update-pkg-deps/release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/5d8a9d2b79884542af407f289e043dcaa752ff72"><code>5d8a9d2</code></a>
Update fluxcd/pkg dependencies</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/7ec3dd0780eb78e39bf667337506f6cebedd1d8d"><code>7ec3dd0</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1994">#1994</a>
from fluxcd/backport-1993-to-release/v1.8.x</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/902eac97eed706d894289ffc3e1ca06ca2b8049e"><code>902eac9</code></a>
Remove no longer needed workaround for Flux 2.8</li>
<li>See full diff in <a
href="https://github.com/fluxcd/source-controller/compare/v1.8.0...v1.8.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/open-component-model/ocm-controller` from 0.28.0 to
0.29.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm-controller/releases">github.com/open-component-model/ocm-controller's
releases</a>.</em></p>
<blockquote>
<h2>v0.29.0</h2>
<h1>Release v0.29.0</h1>
<ul>
<li>feat: Add fine-grained aggregatable ClusterRoles for RBAC (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/852">#852</a>)</li>
<li>fix: update flux api version CR (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/846">#846</a>)</li>
<li>docs: add note about ocm controllers v2 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/845">#845</a>)</li>
<li>chore(deps): update dependencies (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/840">#840</a>)</li>
<li>chore: update mongodb for security compliance fixes (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/838">#838</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 8 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/849">#849</a>)</li>
<li>chore(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/850">#850</a>)</li>
<li>chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/847">#847</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/842">#842</a>)</li>
<li>chore(deps): bump the go group with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/837">#837</a>)</li>
<li>chore(deps): bump the go group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/833">#833</a>)</li>
<li>chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/834">#834</a>)</li>
<li>chore(deps): bump the go group with 4 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/829">#829</a>)</li>
<li>chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.3.1
to 2.4.1 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/825">#825</a>)</li>
<li>chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/822">#822</a>)</li>
<li>chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/821">#821</a>)</li>
<li>chore(deps): bump the go group across 1 directory with 9 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/824">#824</a>)</li>
<li>chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.3.0
to 2.3.1 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/819">#819</a>)</li>
<li>chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/815">#815</a>)</li>
<li>chore(deps): bump github.com/sigstore/cosign/v2 from 2.6.1 to 2.6.2
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/813">#813</a>)</li>
<li>chore(deps): bump the go group with 3 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/811">#811</a>)</li>
<li>chore(deps): bump cuelang.org/go from 0.15.1 to 0.15.3 in the go
group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/809">#809</a>)</li>
<li>chore(deps): bump the go group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/808">#808</a>)</li>
<li>chore(deps): bump the go group with 4 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/805">#805</a>)</li>
<li>chore(deps): bump the go group with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/801">#801</a>)</li>
</ul>
<!-- raw HTML omitted -->
<h2>⬆️ Dependencies</h2>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 8 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/849">#849</a>)</li>
<li>chore(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/850">#850</a>)</li>
<li>chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/847">#847</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/842">#842</a>)</li>
<li>chore(deps): bump the go group with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/837">#837</a>)</li>
<li>chore(deps): bump the go group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/833">#833</a>)</li>
<li>chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/834">#834</a>)</li>
<li>chore(deps): bump the go group with 4 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/829">#829</a>)</li>
<li>chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.3.1
to 2.4.1 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/825">#825</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/359af81ba3c70d344c7c59a3ee12e7cf22973d62"><code>359af81</code></a>
chore(deps): bump the go group with 3 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/855">#855</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/092ad576ae32fe53c5a4d77ead166169e380a24c"><code>092ad57</code></a>
chore(deps): bump the ci group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/854">#854</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/bb80b9f8430ceba579ebd596622058ed8571af56"><code>bb80b9f</code></a>
chore: release note for 0.29.0 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/856">#856</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/32c7d797e5f9545b0934c8eb6dedbaf2123c8474"><code>32c7d79</code></a>
chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 in the ci
group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/853">#853</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/fbc8e06dfa98e2e82f42412303d5a82859a8f173"><code>fbc8e06</code></a>
feat: Add fine-grained aggregatable ClusterRoles for RBAC (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/852">#852</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/6c1aa6ad772461622f28253c9dbb87f8ce26d2cb"><code>6c1aa6a</code></a>
chore(deps): bump github/codeql-action from 4.32.4 to 4.32.5 in the ci
group ...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/54170b08e979bbd89085e9cf1ec61723f71013da"><code>54170b0</code></a>
chore(deps): bump the go group with 8 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/849">#849</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/b943c0d164591ebd787a664ae183bf9f4610c61d"><code>b943c0d</code></a>
chore(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/850">#850</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/d4858614cec7f7148a508c9896a890a51fff6e5a"><code>d485861</code></a>
chore(deps): bump the ci group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/848">#848</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/540e284764641bf0a6ed2ec22b3174bb033d07b6"><code>540e284</code></a>
chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/847">#847</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm-controller/compare/v0.28.0...v0.29.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `ocm.software/ocm` from 0.36.0 to 0.37.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm/releases">ocm.software/ocm's
releases</a>.</em></p>
<blockquote>
<h2>v0.37.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat: add registry client timeout attribute by <a
href="https://github.com/piotrjanik"><code>@​piotrjanik</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1823">open-component-model/ocm#1823</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix: the version comment on codeql is incorrect by <a
href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1828">open-component-model/ocm#1828</a></li>
<li>fix: revert feat: add registry client timeout attribute (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1823">#1823</a>)
by <a href="https://github.com/piotrjanik"><code>@​piotrjanik</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1835">open-component-model/ocm#1835</a></li>
<li>fix: increase token scope to create PRs or sent events in other
repositories by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1834">open-component-model/ocm#1834</a></li>
</ul>
<h3>⬆️ Dependencies</h3>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.3.0
to 2.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1788">open-component-model/ocm#1788</a></li>
<li>chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.3.1
to 2.4.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1798">open-component-model/ocm#1798</a></li>
<li>chore(deps): bump the go group with 11 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1804">open-component-model/ocm#1804</a></li>
<li>chore: update Go version to 1.25.7 by <a
href="https://github.com/morri-son"><code>@​morri-son</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1811">open-component-model/ocm#1811</a></li>
<li>chore(deps): bump the go group across 1 directory with 6 updates by
<a href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1817">open-component-model/ocm#1817</a></li>
<li>chore(deps): bump the go group with 10 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1825">open-component-model/ocm#1825</a></li>
<li>chore: update mongodb for security compliance fixes by <a
href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1827">open-component-model/ocm#1827</a></li>
<li>chore(deps): bump the go group with 7 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1831">open-component-model/ocm#1831</a></li>
</ul>
<!-- raw HTML omitted -->
<h3>🧰 Maintenance</h3>
<ul>
<li>chore: bump VERSION to 0.37.0-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a>[bot] in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1796">open-component-model/ocm#1796</a></li>
<li>chore: correct brew and readme by <a
href="https://github.com/morri-son"><code>@​morri-son</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1815">open-component-model/ocm#1815</a></li>
<li>chore: bump VERSION to 0.38.0-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a>[bot] in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1819">open-component-model/ocm#1819</a></li>
<li>chore: update to use create-github-app-token action instead of
deprecated tibdex by <a
href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1829">open-component-model/ocm#1829</a></li>
<li>chore: Revert &quot;chore: bump VERSION to 0.38.0-dev (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1819">#1819</a>)&quot;
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1836">open-component-model/ocm#1836</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/open-component-model/ocm/compare/v0.36...v0.37.0">https://github.com/open-component-model/ocm/compare/v0.36...v0.37.0</a></p>
<h2>v0.37.0-rc.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🚀 Features</h3>
<ul>
<li>feat: add registry client timeout attribute by <a
href="https://github.com/piotrjanik"><code>@​piotrjanik</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1823">open-component-model/ocm#1823</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fix: the version comment on codeql is incorrect by <a
href="https://github.com/Skarlso"><code>@​Skarlso</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1828">open-component-model/ocm#1828</a></li>
<li>fix: revert feat: add registry client timeout attribute (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1823">#1823</a>)
by <a href="https://github.com/piotrjanik"><code>@​piotrjanik</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1835">open-component-model/ocm#1835</a></li>
<li>fix: increase token scope to create PRs or sent events in other
repositories by <a
href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1834">open-component-model/ocm#1834</a></li>
</ul>
<h3>⬆️ Dependencies</h3>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.3.0
to 2.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1788">open-component-model/ocm#1788</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm/commit/81d078706ddd7becd31ba346ced658bf3f7a75fc"><code>81d0787</code></a>
chore: Revert &quot;chore: bump VERSION to 0.38.0-dev (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1819">#1819</a>)&quot;
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1836">#1836</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/d15beb216875ef07b90853d8e7be97ad532fdec7"><code>d15beb2</code></a>
fix: increase token scope to create PRs or sent events in other
repositories ...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/7c0adfc25940307339b496301b6a3d54c499607d"><code>7c0adfc</code></a>
fix: revert feat: add registry client timeout attribute (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1823">#1823</a>)
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1835">#1835</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/567e941b841f8bc244e01fdd4fa0474fb44501f9"><code>567e941</code></a>
chore(deps): bump the ci group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1832">#1832</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/44e518eb1228ef2eddaac0bf71cb25941701636b"><code>44e518e</code></a>
chore(deps): bump the go group with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1831">#1831</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/2a53f2d2c00d1362c82ecfb2a89d19bb03781f5d"><code>2a53f2d</code></a>
chore(deps): bump shimataro/ssh-key-action from 2.7.0 to 2.8.0 in the ci
grou...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/001ac9fbf5036378dee861900df470b8287283eb"><code>001ac9f</code></a>
chore: update to use create-github-app-token action instead of
deprecated tib...</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/c3ea1f755a9b335fce517559850af935d86a4880"><code>c3ea1f7</code></a>
fix: the version comment on codeql is incorrect (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1828">#1828</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/60e37112390b78f214f71efc20bfa570e43a7f09"><code>60e3711</code></a>
feat: add registry client timeout attribute (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1823">#1823</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/ac1c9a6ae1a17ac4cf9c803b085eca263c22c35d"><code>ac1c9a6</code></a>
chore: update mongodb for security compliance fixes (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1827">#1827</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm/compare/v0.36...v0.37">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -12,35 +12,35 @@ replace github.com/ThalesIgnite/crypto11 => github.com/ThalesGroup/crypto11 v1.6
 require (
 	code.gitea.io/sdk/gitea v0.23.2
 	github.com/fluxcd/cli-utils v0.37.2-flux.1
-	github.com/fluxcd/flux2/v2 v2.8.1
-	github.com/fluxcd/helm-controller/api v1.5.1
-	github.com/fluxcd/image-automation-controller/api v1.1.0
-	github.com/fluxcd/image-reflector-controller/api v1.1.0
-	github.com/fluxcd/kustomize-controller/api v1.8.1
-	github.com/fluxcd/notification-controller/api v1.8.1
-	github.com/fluxcd/pkg/apis/meta v1.25.0
-	github.com/fluxcd/pkg/runtime v0.102.0
-	github.com/fluxcd/pkg/ssa v0.69.0
+	github.com/fluxcd/flux2/v2 v2.8.2
+	github.com/fluxcd/helm-controller/api v1.5.2
+	github.com/fluxcd/image-automation-controller/api v1.1.1
+	github.com/fluxcd/image-reflector-controller/api v1.1.1
+	github.com/fluxcd/kustomize-controller/api v1.8.2
+	github.com/fluxcd/notification-controller/api v1.8.2
+	github.com/fluxcd/pkg/apis/meta v1.26.0
+	github.com/fluxcd/pkg/runtime v0.103.0
+	github.com/fluxcd/pkg/ssa v0.70.0
 	github.com/fluxcd/pkg/version v0.14.0
-	github.com/fluxcd/source-controller/api v1.8.0
+	github.com/fluxcd/source-controller/api v1.8.1
 	github.com/open-component-model/git-controller v0.12.1
-	github.com/open-component-model/ocm-controller v0.28.0
+	github.com/open-component-model/ocm-controller v0.29.0
 	github.com/open-component-model/replication-controller v0.13.1
 	github.com/stretchr/testify v1.11.1
 	k8s.io/api v0.35.2
 	k8s.io/apiextensions-apiserver v0.35.2
 	k8s.io/apimachinery v0.35.2
 	k8s.io/cli-runtime v0.35.2
 	k8s.io/client-go v0.35.2
-	ocm.software/ocm v0.36.0
+	ocm.software/ocm v0.37.0
 	sigs.k8s.io/controller-runtime v0.23.3
 	sigs.k8s.io/e2e-framework v0.6.0
 	sigs.k8s.io/kustomize/api v0.21.1
 	sigs.k8s.io/yaml v1.6.0
 )
 
 require (
-	cloud.google.com/go/auth v0.18.0 // indirect
+	cloud.google.com/go/auth v0.18.1 // indirect
 	cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
 	cloud.google.com/go/compute/metadata v0.9.0 // indirect
 	dario.cat/mergo v1.0.2 // indirect
@@ -80,31 +80,31 @@ require (
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/aws/aws-sdk-go-v2 v1.41.1 // indirect
 	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 // indirect
-	github.com/aws/aws-sdk-go-v2/config v1.32.7 // indirect
-	github.com/aws/aws-sdk-go-v2/credentials v1.19.7 // indirect
+	github.com/aws/aws-sdk-go-v2/config v1.32.9 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.19.9 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.21.0 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.4 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.17 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.55.1 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.55.2 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.9 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.8 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.17 // indirect
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.95.1 // indirect
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.96.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/signin v1.0.5 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.30.9 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.30.10 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.14 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sts v1.41.6 // indirect
 	github.com/aws/smithy-go v1.24.0 // indirect
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver v3.5.1+incompatible // indirect
 	github.com/blang/semver/v4 v4.0.0 // indirect
-	github.com/buildkite/agent/v3 v3.115.2 // indirect
+	github.com/buildkite/agent/v3 v3.115.4 // indirect
 	github.com/buildkite/go-pipeline v0.16.0 // indirect
 	github.com/buildkite/interpolate v0.1.5 // indirect
 	github.com/buildkite/roko v1.4.0 // indirect
@@ -124,7 +124,7 @@ require (
 	github.com/containerd/errdefs/pkg v0.3.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/containerd/platforms v0.2.1 // indirect
-	github.com/containerd/stargz-snapshotter/estargz v0.18.1 // indirect
+	github.com/containerd/stargz-snapshotter/estargz v0.18.2 // indirect
 	github.com/containers/image/v5 v5.36.2 // indirect
 	github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
 	github.com/containers/ocicrypt v1.2.1 // indirect
@@ -139,24 +139,25 @@ require (
 	github.com/digitorus/timestamp v0.0.0-20250524132541-c45532741eea // indirect
 	github.com/dimchansky/utfbom v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v29.1.5+incompatible // indirect
+	github.com/docker/cli v29.2.1+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
 	github.com/docker/docker v28.5.2+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.9.4 // indirect
 	github.com/docker/go-connections v0.6.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
+	github.com/dylibso/observe-sdk/go v0.0.0-20240819160327-2d926c5d788a // indirect
 	github.com/elliotchance/orderedmap v1.8.0 // indirect
 	github.com/emicklei/go-restful/v3 v3.13.0 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
-	github.com/evanphx/json-patch v5.9.11+incompatible // indirect
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
+	github.com/extism/go-sdk v1.7.1 // indirect
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fluxcd/pkg/apis/acl v0.9.0 // indirect
-	github.com/fluxcd/pkg/apis/kustomize v1.15.0 // indirect
-	github.com/fluxcd/pkg/kustomize v1.27.0 // indirect
+	github.com/fluxcd/pkg/apis/kustomize v1.16.0 // indirect
+	github.com/fluxcd/pkg/kustomize v1.27.1 // indirect
 	github.com/fluxcd/pkg/tar v0.17.0 // indirect
 	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/fvbommel/sortorder v1.1.0 // indirect
@@ -194,37 +195,37 @@ require (
 	github.com/go-openapi/swag/yamlutils v0.25.4 // indirect
 	github.com/go-openapi/validate v0.25.1 // indirect
 	github.com/go-test/deep v1.1.1 // indirect
-	github.com/go-viper/mapstructure/v2 v2.4.0 // indirect
+	github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/goccy/go-json v0.10.5 // indirect
 	github.com/goccy/go-yaml v1.18.0 // indirect
+	github.com/gofrs/flock v0.13.0 // indirect
 	github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
 	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
 	github.com/golang/snappy v1.0.0 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/certificate-transparency-go v1.3.2 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
-	github.com/google/go-containerregistry v0.20.7 // indirect
+	github.com/google/go-containerregistry v0.21.1 // indirect
 	github.com/google/go-github/v45 v45.2.0 // indirect
 	github.com/google/go-github/v73 v73.0.0 // indirect
 	github.com/google/go-querystring v1.2.0 // indirect
 	github.com/google/s2a-go v0.1.9 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.11 // indirect
-	github.com/googleapis/gax-go/v2 v2.16.0 // indirect
+	github.com/googleapis/gax-go/v2 v2.17.0 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gowebpki/jcs v1.0.1 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 // indirect
-	github.com/hashicorp/errwrap v1.1.0 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
-	github.com/hashicorp/go-multierror v1.1.1 // indirect
 	github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
 	github.com/hashicorp/go-rootcerts v1.0.2 // indirect
 	github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
 	github.com/hashicorp/go-version v1.7.0 // indirect
 	github.com/hashicorp/vault-client-go v0.4.3 // indirect
+	github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b // indirect
 	github.com/in-toto/attestation v1.1.2 // indirect
 	github.com/in-toto/in-toto-golang v0.9.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
@@ -233,7 +234,7 @@ require (
 	github.com/jinzhu/copier v0.4.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kevinburke/ssh_config v1.4.0 // indirect
-	github.com/klauspost/compress v1.18.3 // indirect
+	github.com/klauspost/compress v1.18.4 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/klauspost/pgzip v1.2.6 // indirect
 	github.com/letsencrypt/boulder v0.20251110.0 // indirect
@@ -247,16 +248,14 @@ require (
 	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mattn/go-runewidth v0.0.19 // indirect
-	github.com/miekg/pkcs11 v1.1.1 // indirect
+	github.com/miekg/pkcs11 v1.1.2 // indirect
 	github.com/mikefarah/yq/v4 v4.48.1 // indirect
-	github.com/mitchellh/copystructure v1.2.0 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
-	github.com/mitchellh/reflectwalk v1.0.2 // indirect
 	github.com/moby/docker-image-spec v1.3.1 // indirect
 	github.com/moby/locker v1.0.1 // indirect
-	github.com/moby/moby/api v1.52.0 // indirect
-	github.com/moby/moby/client v0.2.1 // indirect
+	github.com/moby/moby/api v1.53.0 // indirect
+	github.com/moby/moby/client v0.2.2 // indirect
 	github.com/moby/spdystream v0.5.0 // indirect
 	github.com/moby/sys/atomicwriter v0.1.0 // indirect
 	github.com/moby/sys/capability v0.4.0 // indirect
@@ -289,7 +288,7 @@ require (
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/common v0.67.5 // indirect
 	github.com/prometheus/procfs v0.19.2 // indirect
-	github.com/redis/go-redis/v9 v9.17.2 // indirect
+	github.com/redis/go-redis/v9 v9.18.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/ryanuber/go-glob v1.0.0 // indirect
 	github.com/sagikazarmark/locafero v0.12.0 // indirect
@@ -298,11 +297,11 @@ require (
 	github.com/secure-systems-lab/go-securesystemslib v0.10.0 // indirect
 	github.com/sergi/go-diff v1.4.0 // indirect
 	github.com/shibumi/go-pathspec v1.3.0 // indirect
-	github.com/sigstore/cosign/v3 v3.0.4 // indirect
+	github.com/sigstore/cosign/v3 v3.0.5 // indirect
 	github.com/sigstore/fulcio v1.8.5 // indirect
 	github.com/sigstore/protobuf-specs v0.5.0 // indirect
 	github.com/sigstore/rekor v1.5.0 // indirect
-	github.com/sigstore/rekor-tiles/v2 v2.0.1 // indirect
+	github.com/sigstore/rekor-tiles/v2 v2.2.0 // indirect
 	github.com/sigstore/sigstore v1.10.4 // indirect
 	github.com/sigstore/sigstore-go v1.1.4 // indirect
 	github.com/sigstore/timestamp-authority/v2 v2.0.4 // indirect
@@ -316,6 +315,8 @@ require (
 	github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
 	github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
+	github.com/tetratelabs/wabin v0.0.0-20230304001439-f6f874872834 // indirect
+	github.com/tetratelabs/wazero v1.11.0 // indirect
 	github.com/texttheater/golang-levenshtein/levenshtein v0.0.0-20200805054039-cae8b0eaed6c // indirect
 	github.com/thales-e-security/pool v0.0.2 // indirect
 	github.com/theupdateframework/go-tuf v0.7.0 // indirect
@@ -338,24 +339,25 @@ require (
 	github.com/xlab/treeprint v1.2.0 // indirect
 	github.com/yuin/gopher-lua v1.1.1 // indirect
 	gitlab.com/gitlab-org/api/client-go v1.29.0 // indirect
-	go.mongodb.org/mongo-driver v1.17.6 // indirect
+	go.mongodb.org/mongo-driver v1.17.9 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0 // indirect
 	go.opentelemetry.io/otel v1.40.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.40.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0 // indirect
 	go.opentelemetry.io/otel/metric v1.40.0 // indirect
 	go.opentelemetry.io/otel/sdk v1.40.0 // indirect
 	go.opentelemetry.io/otel/sdk/metric v1.40.0 // indirect
 	go.opentelemetry.io/otel/trace v1.40.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.9.0 // indirect
+	go.uber.org/atomic v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.48.0 // indirect
-	golang.org/x/mod v0.32.0 // indirect
+	golang.org/x/mod v0.33.0 // indirect
 	golang.org/x/net v0.50.0 // indirect
 	golang.org/x/oauth2 v0.35.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
@@ -364,9 +366,9 @@ require (
 	golang.org/x/text v0.34.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
-	google.golang.org/api v0.261.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260120174246-409b4a993575 // indirect
+	google.golang.org/api v0.267.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 // indirect
 	google.golang.org/grpc v1.78.0 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
@@ -376,11 +378,11 @@ require (
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	helm.sh/helm/v3 v3.20.0 // indirect
+	helm.sh/helm/v4 v4.1.3 // indirect
 	k8s.io/component-base v0.35.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
-	k8s.io/kubectl v0.35.1 // indirect
+	k8s.io/kubectl v0.35.2 // indirect
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
 	oras.land/oras-go/v2 v2.6.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect